Cousin Domains

Cousin Domains are domain names that are very similar to any other valid domain name. If you expect a domain to send genuine emails, but want to mark an email from any other variations of the domain name as spam, you can add it in this section.

For example, if 'zylker.com' sends genuine emails, but emails from 'zylker1.com' needs to be processed for spam, you can add zylker.com here.

1. Login to the Zoho Mail Admin Console.
2. Go to the Security & Compliance menu, and select Phishing & Malware .
3. Select the Cousin Domains option.
4. In the Email Delivery Action dropdown, select the actions for emails that have look-alike domain names.
   1. If you select None, no action will be taken.
   2. If you select Move to spam, the email will be moved to the spam folder of the email recipient.
   3. If you select Move to quarantine, the email will be moved to the quarantine list, from where the admin will have to process if further.
5. You can also choose to Include Internal Domains, which means that all of your organization's domains will undergo the cousin domains check by default. So, any domain name that is similar to yours will undergo the specified action.
6. Now, click Add, enter the domain names for which cousin domain check has to be done, and click Add.
7. You can also choose to include the domain names by click on Import, and selecting a CSV file which has all the domain names.
8. All the added domains will be listed under Domain Name section.
   

Display Name Spoofing

You can control the fraudulent usage of display names by setting up the respective conditions for emails that violate your customization. You can set up a display name and associate one or more email addresses with this display name in the Zoho Mail Control Panel. For example, consider the email address ceo@mydomain.com, you can ensure that if an email with the display name 'CEO' arrives from any other email address, the action defined by you is taken on this email address.

Follow the below steps to add a policy to prevent display name fraud:

1. Login to the Zoho Mail Admin Console.
2. Go to the Security & Compliance menu, and select Phishing & Malware .
3. Select the Display Name Spoofing option.
4. In the Email Delivery Action section, select the action for emails that have spoofed display names.
   1. If you select None, no action will be taken.
   2. If you select Move to spam, the email will be moved to the spam folder of the email recipient.
   3. If you select Move to quarantine, the email will be moved to the quarantine list, from where the admin will have to process if further.
5. Now, click Add>>Add using email addresses.
    
    
6. Enter the display name, and the email addresses that can be associated with this name, and click Add.
   

You will be able to see a list of the Display Names and the respective Email Addresses that you have added in the list.

For users with alias email address, you can quickly add the user's primary email address along with their alias addresses without having to manually enter each email address. Follow the below steps:

1. Click Add>>Search and add organization users. 
   
2. A list of your organization users appears as a pop-up window.
   
3. Select the user you wish to add. If you wish to provide a different display name for the user, you can enter it in the Display name text box. Else, you can leave that box empty.
4. Click Add with Aliases if you want to add the user's alias email address along with their primary email address.
5. Click Add without aliases if you want to associate only the user's primary email address with their display name. 
   

You will be able to see the Display Name and the respective Email Addresses that you have added in the list.

Furthermore, to avoid display name spoofing, Zoho Mail will show the sender's display name only if the sender is in your contacts or if you have had a previous conversation with the sender. Otherwise, only the sender's email address will be shown. For example, consider you get an email from rebecca@zylker.com who has Rebecca as her display name. The display name Rebecca will be shown only if rebecca@zylker.com is already in your contacts or if you have had a previous conversation with her. Otherwise, only the email address rebecca@zylker.com will be shown to avoid display spoofing.

Malware Processing

To ensure that emails your org members receive do not have any harmful scripts or tags, you can choose the content types or the HTML tags that you do not want to allow, and any emails containing these tags, will be moved to the user's spam folder.

1. Login to the Zoho Mail Admin Console.
2. Go to the Security & Compliance menu, and select Phishing & Malware .
3. Select the Malware Processing option.
4. In the Content-based Spam Settings option, you can see 4 content types (web bugs, bulk emails, JavaScript, macros)  listed.
5. Select the types that you think might be harmful, and emails containing the content types selected will be moved to spam.
6. Next, in the HTML Tags-based Spam Check option, 4 tags (frame, object, embed, form) will be listed.
7. Select the tags that you think might be harmful, and emails containing these tags will be moved to spam.